MetaMask Phishing Scam
If you make use of the MetaMask Crypto Platform the last thing you want is that a scammer gains access to your account through you revealing your login details on a fake webpage. It is always good practice to pause before taking any action and if in doubt access your platform in your usual way rather than through links in an email you have received.
Let's look at the email and see why it is a scam.
E-Mail received:
Date: 01/06/2025, 07:33
From: MetaMask pzhqmon9@dat.io
To: [Name and email address redacted]
Subject: Last Reminder: Security Notification
Notes: The sender email address has the io domain extension which is the British Indian Ocean Territories, an unlikely choice for Metamask. The Setup now button link... https://mbylnk.com/gosdsM?id=-7854956755520672855-5528 does not seem to be genuine.
Recommendation: Just delete the email, do not click on any links.
E-Mail received:
Date: 05/06/2025, 08:58
From: MetaMask zfgo0ef7@noh.io
To: [Name and email address redacted]
Subject: Security Notification
Notes: The sender email address has the io domain extension which is the British Indian Ocean Territories, an unlikely choice for Metamask. The Review Now now button link... https://t.co/CQtbSJGgD6?id=4512015302808720279-5326 does not seem to be genuine.
Recommendation: Just delete the email, do not click on any links.
Once you are on a scammers email list you will keep getting scam emails. If you have been scammed you can "join" the "Vip list", the "suckers list".
Here are another couple of emails targetting possible metamask users. They will most probably not know who is a metamask user and who is not... it is very much a scatter gun approach to catch anyone they can.
E-Mail received:
Date: 19/12/2025, 17:15
From: MetaMask-Team noreply@paypoool.firebaseapp.com
To: [Name and email address redacted]
Subject: Reset your 2FA to protect your coins
Notes:
Sloppy designed email but so long as they harvest the lowest hanging fruit the email has done it's job. Metamask communications should come from an official metamask email address matching the domain of their official website. Again a firebaseapp.com email which seems to be a platform scammers are increasingly using these days. The click through link: https://2fawallet.https://2fawallet.metamaskseed.com/ The domain name was only regsitered on the 14th December 2025, 5 days before the email was sent out... a definite "red flag".
E-Mail received:
Date: 26/12/2025, 19:13
From: МеtаМаsk-Team noreply@plaasead.firebaseapp.com
To: [Name and email address redacted]
Subject: 2FA - Protect Your Wаllеt
Notes:
Identical email just from a different firebaseapp.com email address.
Click through address is: https://red454656566564.metamansk.com/
hgfdjgfdjhgdjhgehghgfshgf564654654gdfhhgfdfdfggfdgfdjhgjhgfh
Can we take such an address seriously? metamansk.com, a typo of metamask.com was registered on the 26th December 2025, the actual day the email was sent out.
Recommendation: Just delete the email, do not click on any links.
Michael Fowler
Other articles by Michael Fowler:
Piano Donation Scam - Michael Fowler
On first glance this sounds like a very genuine gesture by someone down-sizing after a breavement and wishing to donate a much loved piano to a worthy cause. Think again, this is a scam that has been going the rounds for a few years... more >>
Compensation Payment from Department of Justice Scam - Michael Fowler
A US$3,950,000.00 compensation payment is on offer from no less than Pam Bondi, United States Attorney General, U.S. Department of Justice so it must be real? You want to ask yourself why would someone claiming to be the US Attorney General and emailing from a Thai email address want to give you this fortune? more >>
Insufficient Storage Space Scam - Michael Fowler
If you have been using your email account for several years without clearing out old emails it could be that you are approaching and possibly exceeding the storage limits that you have on your email account. What you will not get is an email in this form to try and get you to click on a link... more >>